Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VlAzR1ImTpyZ5a5bfOa5Cg2iKRk.roa
File: VlAzR1ImTpyZ5a5bfOa5Cg2iKRk.roa (raw, json)
Hash identifier: le4FxhzdMtquweV6oZdHFI2Ht7mTpVzlLCqXvTy8eSQ=
Subject key identifier: 56:50:33:47:52:26:4E:9C:99:E5:AE:5B:7C:E6:B9:0A:0D:A2:29:19
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A13A33C4F06738CA5E2016447DCB22C62C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VlAzR1ImTpyZ5a5bfOa5Cg2iKRk.roa
Signing time: Wed 14 Oct 2026 11:37:13 +0000
ROA not before: Wed 14 Oct 2026 11:37:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 151.244.101.0/24 maxlen: 24
151.246.180.0/24 maxlen: 24
151.247.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:33:c4:f0:67:38:ca:5e:20:16:44:7d:cb:22:c6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 14 11:37:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5650334752264e9c99e5ae5b7ce6b90a0da22919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:80:91:b9:41:04:83:cd:11:01:78:22:9d:
75:0d:ba:08:b7:a1:da:0a:e6:61:d5:7e:49:a4:dd:
a3:f2:e8:21:23:b7:f8:03:a3:cc:7e:5f:3e:d0:fb:
85:32:dd:7d:60:8d:bd:29:0f:c2:47:58:29:b1:30:
60:40:fe:05:5b:08:d3:d0:df:fe:cf:45:50:58:f8:
0c:b1:c0:e9:ce:9e:b9:95:5b:b8:27:0f:a0:a8:d7:
bd:e6:21:44:7b:28:9f:9e:4c:49:fd:e7:36:d3:97:
75:84:bd:b1:c0:4f:ce:eb:0a:4f:8b:95:bb:09:32:
ff:a4:9f:f6:74:95:c0:e1:ae:f4:30:df:e9:7e:91:
80:69:db:96:fe:fb:2e:88:90:33:15:e6:6e:b9:8e:
f6:3b:a5:47:60:4f:f6:85:ef:f5:8e:2e:8f:37:32:
9f:bc:d3:0c:27:7f:85:6d:30:da:10:5a:bb:c9:d3:
4d:7f:e6:09:d0:34:04:40:a7:6c:d1:d3:b2:87:28:
59:c0:d5:7d:d4:f8:9d:0c:d1:75:e4:b8:ad:e8:a0:
6b:7a:80:c8:3e:90:6e:bb:de:60:c7:1f:55:86:ac:
80:9c:ad:e0:e5:81:c5:de:24:79:c6:74:68:0e:f8:
51:31:b8:4b:c4:00:54:ea:b1:eb:a6:6d:b8:e3:6a:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:50:33:47:52:26:4E:9C:99:E5:AE:5B:7C:E6:B9:0A:0D:A2:29:19
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VlAzR1ImTpyZ5a5bfOa5Cg2iKRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.101.0/24
151.246.180.0/24
151.247.130.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d5:db:1d:ad:87:ca:e6:e0:fd:b6:45:91:72:ff:f2:c6:b0:
30:cb:0d:68:74:93:46:89:b6:00:ad:53:61:f7:d8:32:c7:68:
41:40:be:7c:01:07:ac:80:54:e0:80:64:d8:03:2a:56:6e:99:
4c:0f:03:02:eb:15:2a:fb:48:07:7e:5d:26:00:01:e0:31:f5:
2b:30:75:4a:76:b8:8e:7a:ef:f7:9a:9c:c5:b9:02:91:57:4d:
95:65:6e:0f:c7:41:f1:6e:74:4e:70:16:eb:14:f2:5f:78:62:
55:a0:ef:73:4f:6e:63:2f:87:d1:86:b6:1d:89:15:30:7c:4b:
ea:bd:b9:ae:db:68:c9:12:ed:83:41:a9:99:a7:06:e7:07:aa:
cc:08:57:ce:32:49:ef:09:33:e8:92:53:b9:59:81:5a:2d:56:
65:dc:5a:20:7c:21:60:b6:29:7f:cc:b8:41:1e:c3:27:97:0f:
50:84:5d:f8:7c:14:1c:2c:cb:ab:7c:79:e1:40:e8:e4:d6:27:
04:f8:e6:7e:58:46:92:7a:c2:55:87:e6:5e:12:b9:46:f2:e5:
1e:1e:03:12:c2:0c:85:7a:1e:bb:c9:b9:fc:06:fc:4f:07:eb:
1b:27:b6:d6:89:66:43:f2:8d:0e:78:2d:f9:eb:e2:28:64:a2:
2c:f9:12:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:49:23 2026 by rpki-client